Acceptable Use Policy

SideClick Acceptable Use Policy (AUP)

This policy is incorporated into the Terms of Service and the EULA.

This policy protects patients, practices, and the shared services. It applies to the SideClick software and to the hosted services (licensing, sync relay, patient portal, cloud). Breach can lead to suspension of hosted services or key revocation under Terms of Service §9 and §11 — never to loss of access to data already on your machines (EULA §7).

1. Lawful, clinical use

Use SideClick only for the lawful clinical and administrative operations of your own practice. Ensure everyone using clinical features holds the professional registration their jurisdiction requires, and that you have the consents and lawful bases your patient-data laws demand — the software's consent, audit and access-request tooling helps you do this, but the responsibility is yours (EULA §11).

2. Patient-facing surfaces

Do not use the patient portal, messaging, or published calendar feeds to send marketing or spam, harass anyone, or communicate with people who are not your patients or their authorised caregivers. Do not publish the open-slot board or calendar feeds in a way that includes patient-identifying information — the software sanitises these surfaces; do not work around it.

3. Licence integrity

Do not share licence keys outside the licensed practice, publish them, resell them, or use technical means to evade seat, device, or edition limits. (The remedy is contractual: EULA §3.)

4. Service integrity

Do not probe, overload, disrupt, or attempt to gain unauthorised access to the hosted services or other practices' data; do not run vulnerability scans against the hosted services except within the scope and rules of our security disclosure policy or with our prior written consent. Good-faith security research within that policy is welcome and will not be treated as a breach of this one.

5. Prohibited content

Do not use the hosted services to store or transmit content that is unlawful, or that infringes others' rights. (Because relay and cloud content is end-to-end encrypted, we cannot and do not monitor it; this clause is enforced on report, not by inspection.)

6. Enforcement

For breaches we apply the least restrictive effective measure — warning, feature suspension, service suspension, or key revocation — with notice and an opportunity to remedy where the breach is remediable, and immediately where required to protect patients or the service. Local access to existing practice data is never a sanction.

---

SideClick (Pty) Ltd · support@sideclick.io Version 1.1 · Published 2026-09-12